6550 matches found
metlo
Metlo API Security Secure Your API. Metlo is an open-source API security platform Metlo is an open source API security tool you can setup in 15 minutes that inventories your endpoints, detects bad actors and blocks malicious traffic in real time. Detect API attacks in real time. Automatically blo...
nysm
nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...
rapidscan
🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...
hate_crack
root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that...
zi
🎯 Roadmap Generally, new features will be introduced as a component to improve performance and compatibility and not to force, but to allow the user decide and choose the features. Let us know what should be improved and maintained with a ⭐ on features you like and use: ⚙️ Plugins 🌀 Annexes 📦...
CVE-2026-67189
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...
EUVD-2026-62699
pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records returned by reverse DNS lookups are incorporated without sanitization into AJAX responses and rendered as HTML through a DOM sink...
CVE-2026-67189
pfSense Plus before 26.07 and CE through 2.8.1 render PTR records as unsanitized HTML in Traffic Graphs AJAX responses. An attacker controlling a PTR record who appears as a top talker can execute arbitrary JavaScript in an admin's browser, enabling session hijacking and OS command execution. Fix...
The OWASP LLM Top 10 Was the Warm-Up: What Comes Next
When the OWASP Top 10 for LLM Applications arrived, it did the industry a real service. It gave security teams a stable, vendor-neutral vocabulary for a threat surface that was moving too fast to describe. Prompt injection, sensitive information disclosure, system prompt leakage, improper output...
exp-labs
exp-labs Cybersecurity Training Platform This modern web secu...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats-top, prometheus-nats-exporter, nats-server, nats-server-fips...
GO-2026-4533 vulnerabilities
Vulnerabilities for packages: nats-top-fips, nats-top, rke2-runtime, telegraf, kine, k3s...
GO-2026-4832 vulnerabilities
Vulnerabilities for packages: milvus, rke2-runtime-fips, nats-top-fips, nats-top, prometheus-nats-exporter-fips, rke2-runtime, nats-fips, prometheus-nats-exporter, telegraf, kine, k3s, nats...
GO-2025-3600 vulnerabilities
Vulnerabilities for packages: nats-top, nats-server...
GO-2026-4533 vulnerabilities
Vulnerabilities for packages: nats-top, k3s, kine, telegraf...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: nats, k3s, kine, telegraf, nats-top...
GO-2026-4830 vulnerabilities
Vulnerabilities for packages: nats, k3s, kine, telegraf, nats-top...
GO-2026-4835 vulnerabilities
Vulnerabilities for packages: nats, k3s, kine, telegraf, nats-top...